Software supply chain attacks surged in 2024, targeting U.S. companies and IT providers most frequently. With aerospace, healthcare, and manufacturing sectors heavily impacted, these breaches exploit trusted access to customer environments, leading to costly downstream effects. A defense-in-depth strategy based on zero trust and secure coding is essential to mitigate risks.